aboutsummaryrefslogtreecommitdiffstats
path: root/selinux/cpboot-daemon.te
diff options
context:
space:
mode:
authorRGIB <gibellini.roberto@gmail.com>2016-05-15 14:24:00 +0200
committerRoberto Gibellini <gibellini.roberto@gmail.com>2016-05-15 05:31:23 -0700
commit21c3f3ea72eebfaf3c2889bf4de1876d3d3e5fbb (patch)
tree19c75919db585f02199b5eaee7cc0224a3322569 /selinux/cpboot-daemon.te
parent2212bd633d8113f4cb9f455ef2102ee5d6671189 (diff)
downloaddevice_samsung_kona-common-21c3f3ea72eebfaf3c2889bf4de1876d3d3e5fbb.zip
device_samsung_kona-common-21c3f3ea72eebfaf3c2889bf4de1876d3d3e5fbb.tar.gz
device_samsung_kona-common-21c3f3ea72eebfaf3c2889bf4de1876d3d3e5fbb.tar.bz2
kona : selinux update
Change-Id: I29e006b5bdb1a72455e830a083d122aeae40b2f3
Diffstat (limited to 'selinux/cpboot-daemon.te')
-rw-r--r--selinux/cpboot-daemon.te6
1 files changed, 3 insertions, 3 deletions
diff --git a/selinux/cpboot-daemon.te b/selinux/cpboot-daemon.te
index eab7ee6..26b877c 100644
--- a/selinux/cpboot-daemon.te
+++ b/selinux/cpboot-daemon.te
@@ -6,6 +6,8 @@ domain_trans(init, rootfs, cpboot-daemon)
dontaudit cpboot-daemon usbfs:dir search;
dontaudit cpboot-daemon usbfs:filesystem mount;
dontaudit cpboot-daemon self:capability mknod;
+dontaudit cpboot-daemon device:chr_file { read write create unlink open };
+dontaudit cpboot-daemon device:dir { write add_name remove_name };
allow cpboot-daemon cgroup:dir { create add_name };
allow cpboot-daemon efs_file:file { read write open };
@@ -16,6 +18,4 @@ allow cpboot-daemon radio_prop:property_service set;
allow cpboot-daemon self:capability { setuid dac_override };
allow cpboot-daemon sysfs:file write;
allow cpboot-daemon userdata_block_device:blk_file { read open };
-allow cpboot-daemon efs_file:dir search;
-allow cpboot-daemon efs_file:file { read write };
-allow cpboot-daemon device:dir { write }; \ No newline at end of file
+allow cpboot-daemon efs_file:dir search; \ No newline at end of file